Recently we have seen several examples of enterprise and business users being targeted by cyber-attack. Security is a big issue these days and as more and more companies are operating online; it is becoming a key battleground in the battle between Google Workspace and Microsoft 365. In this regard, Google is introducing a new verification stage to certain actions on Google Workspace in an attempt to bolster business user security.
In a Google Workspace blog post, the internet giant has announced stronger verification safeguards to protect certain sensitive events. The idea behind the plan is to prevent hijacking attempts that can have far-reaching consequences for both companies and individuals.
The update will see Google evaluating sessions that attempt certain sensitive actions and then inserting a new “Verify it’s You” stage into the process if the session and the action are deemed suspicious. This new verification stage can include 2-step verification, such as receiving a code or approving the action on a second device. For example, if a scammer is able to gain access to your account and attempt to change its name, Google will block the move until it receives verification that the change is intentional.
Google believes this should add increased security and peace of mind to Google Workspace users, saying it is important because:
“This added layer of security helps to intercept bad actors who have gained access to a user’s account, further protecting their data and your organization’s sensitive information. Additionally, these challenge attempts will be logged as an audit event allowing for further admin investigation.”
According to Google, the update is already rolling out and so there is a good chance that it is already active on your Business and Enterprise Google Workspace account.
For an example of just how serious these types of hacks can be, this fake job offer hack cost one company $620 million.